Vulnerabilities
Last updated 3 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
node-forge
|
Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 | High Risk 7.4 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: Regular expression denial of service in PEM decoding (pem.decode) | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: Denial of service in TLS record processing via call stack exhaustion | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: TLS client crash when the server sends no certificate | Medium Risk 5.9 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store | Low Risk 3.7 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: AES-GCM authentication bypass via unvalidated tagLength option | Medium Risk 5.9 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie | Medium Risk 4.8 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: ASN.1 OID first arc truncation in asn1.oidToDer | Low Risk 3.7 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) | Low Risk 2.9 | 7 hours ago | 7 hours ago |
|
node-forge
|
Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
node-forge
|
node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements | High Risk 7.5 | 1 month ago | 29 days ago |
|
node-forge
|
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field | High Risk 7.5 | 7 months ago | 29 days ago |
|
node-forge
|
Forge has signature forgery in Ed25519 due to missing S > L check | High Risk 7.5 | 7 months ago | 1 month ago |
|
node-forge
|
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input | High Risk 7.5 | 7 months ago | 1 month ago |
|
node-forge
|
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) | High Risk 7.4 | 7 months ago | 1 month ago |
|
node-forge
|
node-forge has ASN.1 Unbounded Recursion | High Risk 8.0 | 11 months ago | 1 month ago |
|
node-forge
|
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization | High Risk 8.6 | 11 months ago | 1 month ago |
|
node-forge
|
node-forge is vulnerable to ASN.1 OID Integer Truncation | Medium Risk 6.0 | 11 months ago | 1 month ago |
|
node-forge
|
Prototype Pollution in node-forge | Critical 9.8 | 6 years ago | 1 year ago |
|
node-forge
|
Improper Verification of Cryptographic Signature in `node-forge` | Medium Risk 5.3 | 4 years ago | 2 years ago |
|
node-forge
|
Improper Verification of Cryptographic Signature in node-forge | High Risk 7.5 | 4 years ago | 2 years ago |
|
node-forge
|
Improper Verification of Cryptographic Signature in node-forge | High Risk 7.5 | 4 years ago | 2 years ago |
|
node-forge
|
Open Redirect in node-forge | Medium Risk 6.1 | 4 years ago | 2 years ago |
|
node-forge
|
Prototype Pollution in node-forge debug API. | Low Risk 3.0 | 4 years ago | 4 years ago |
|
node-forge
|
Prototype Pollution in node-forge util.setPath API | Low Risk 3.0 | 4 years ago | 4 years ago |
|
node-forge
|
URL parsing in node-forge could lead to undesired behavior. | Low Risk 3.0 | 4 years ago | 4 years ago |
Page 1